HTTPS Sites Secure Ranking Boosts in Google

“We want to convince you that all communications should be secure by default.”

Those were the words uttered by Webmaster Trends Analyst Pierre Far at the Google I/O event this summer, when he and a Google colleague talked “HTTPS everywhere.” And this week, Google Search is taking a very convincing stance on the matter: HTTPS is now a ranking signal in its algorithm.

Over the past few months we’ve been running tests taking into account whether sites use secure, encrypted connections as a signal in our search ranking algorithms. We’ve seen positive results, so we’re starting to use HTTPS as a ranking signal. For now it’s only a very lightweight signal — affecting fewer than 1% of global queries and carrying less weight than other signals such as high-quality content — while we give webmasters time to switch to HTTPS. But over time, we may decide to strengthen it, because we’d like to encourage all website owners to switch from HTTP to HTTPS to keep everyone safe on the web.

On Google+, Webmaster Trends Analyst John Mueller answered questions from the community, like, “What if you have an informational site – does it apply to you, too?”

Mueller said this:

Some webmasters say they have “just a content site,” like a blog, and that doesn’t need to be secured. That misses out two immediate benefits you get as a site owner:

Related articles

1. Data integrity: only by serving securely can you guarantee that someone is not altering how your content is received by your users. How many times have you accessed a site on an open network or from a hotel and got unexpected ads? This is a very visible manifestation of the issue, but it can be much more subtle.

2. Authentication: How can users trust that the site is really the one it says it is? Imagine you’re a content site that gives financial or medical advice. If I operated such a site, I’d really want to tell my readers that the advice they’re reading is genuinely mine and not someone else pretending to be me.

On top of these, your users get obvious (and not-so-obvious) benefits.

Moving a site from HTTP to HTTPS could have technical problems if not implemented carefully. Google gives tips on how to handle the move here.

And, in its help files, it also talks about best practices for setting up HTTPS, which include helping the search engines see the site as secure by following these tips (more details exist on the help page itself):

Use relative URLs for resources that reside on the same secure domain.

Use protocol relative URLs for all other domains or update your site links to link directly to the HTTPS resource.

Use a web server that supports HTTP Strict Transport Security (HSTS) and make sure it’s enabled.

If you have questions or concerns, Google is directing people to the Webmaster Help Forums. For example, this search for “HTTPS” in the forums pulls up several conversations already happening on the matter. The announcement said that in the coming weeks, Google would be publishing detailed best practices on this issue.

Want to stay on top of the latest search trends?

Get top insights and news from our search experts.

Related reading

Optimizing your 404 page is unlikely to top your list in terms of digital marketing priorities. However, it’s not something you should overlook or try to rush - especially if your site is frequently changing URLs.

Virtual reality (VR) has been the talk of the town for a little while now and its marketing potential is getting difficult to ignore. But despite the clear benefits of VR, businesses are still hesitant about diving in. Can VR content be found using search engines? Is it even possible to optimize virtual reality content for search? We take a look at how to do VR SEO.

Speak to pretty much anyone about SEO and the rhetoric will largely be in regards to the "Big G". But there are countries in the world where Google is not king, and one of them is China. If you want to optimize for the second-largest economy in the world, here's what you need to know about Baidu, China's primary search engine.

Google Search Console has benefited from some significant upgrades over the past decade. That said, it is still far from perfect and few would argue that it provides a complete package in its current guise. Therefore, Google's recent announcement of some changes to the platform was very warmly received by the SEO community.

Here we’ll take a look at the basic things you need to know in regards to search engine optimisation, a discipline that everyone in your organisation should at least be aware of, if not have a decent technical understanding.